Junior Cyber Security Analyst in Caerphilly

Please note, this vacancy closes at 12pm, midday, on23 rd November.
We reserve the right to close this vacancy early if we receive a high volume of suitable applications.

Job Profile

Job Title: Junior Cyber Security Analyst

Hours: Full-time, 35 hours

Contract: Permanent

Interviews: 3 rd & 4 th December

Reporting to

Cyber Security & Cloud Architecture Engineer

Broad purpose of the post

This is a great development role for someone at the beginning of their career in cyber security, including a graduate or someone progressing from an IT support or service desk background. You will provide practical support with day-to-day cyber security activity, routine administration, monitoring and record keeping in order to help protect United Welsh's systems, services, colleagues and data.

Working under the guidance of the Cyber Security & Cloud Architecture Engineer and closely with colleagues across the Technology Team, you will take ownership of defined analyst-level tasks, support elements of the service desk workload and escal…

you will learn from experienced cyber and service desk colleagues while building practical knowledge of Microsoft security technologies, identity and access management, cloud security and cyber governance.

Key Accountabilities

Cyber Security Monitoring and Escalation

• Monitor routine alerts from Microsoft Defender XDR and other security tools, complete initial checks and record relevant information.
• Identify and promptly escape suspicious activity, phishing, security weaknesses and potential cyber incidents to the Cyber Security & Cloud Architecture Engineer in line with agreed procedures.
• Support investigations by gathering information, maintaining records and completing agreed follow-up actions.
• Work with external security partners when directed and support incident documentation and lessons learned activity.

Vulnerability and Security Administration

• Review vulnerability reports and security recommendations, maintain trackers and follow up agreed remediation actions.
• Maintain clear and accurate records, escalating overdue, recurring or higher-risk issues.

Security Technology and Access

• Assist with the routine administration, monitoring and review of Microsoft and other security technologies, including Defender XDR, Entra and related cloud security services.
• Support the testing and implementation of security controls across Microsoft 365 and Azure under appropriate guidance.
• Support routine access management activity, including maintaining records and completing agreed access governance checks.
• Escalate configuration, access or security concerns that require higher-level review or decision-making.

Service Desk and User Support

• Complete appropriate first-line support tasks allocated through the service desk and suited to the Junior Cyber Security Analyst role, particularly where they relate to security, access or user accounts.
• Respond to straightforward colleague queries, provide clear guidance and keep tickets and users updated.
• Identify when an issue is outside the role's competence or authority and escalates it promptly to the appropriate service desk colleague or the Cyber Security & Cloud Architecture Engineer.
• Share learning and information with service desk colleagues to support consistent and secure ways of working.

Governance, Awareness and Documentation

• Help gather and organise evidence for Cyber Essentials Plus, ISO 27001, audits, assessments and internal compliance activity.
• Support the maintenance of cyber security procedures, risk records, technical documentation, standards and playbooks.
• Assist with supplier assurance administration where required.
• Maintain accurate records of incidents, vulnerabilities, checks and other security activity, and contribute information for reports and metrics.

Personal Requirements

• A basic understanding of cyber security concepts and common threats, including phishing, malware and ransomware.
• A good understanding of Microsoft 365 and cloud technologies.
• An awareness of identity, access and account security principles.
• The ability to follow technical processes and procedures accurately.
• Good written and verbal communication skills.
• Good problem-solving skills and strong attention to detail.
• Evidence of learning in cyber security, IT or a related subject through education, self-directed study, certification, work experience or personal projects.
• The confidence and self-awareness to raise concerns and escalates it rather than working beyond your knowledge or authority.
• Experience in an IT support, service desk, technical support or customer support environment.
• Knowledge of Microsoft Defender technologies, Microsoft Entra or Microsoft Azure.
• Awareness of vulnerability management, security monitoring or incident response.
• Awareness of networking concepts and technologies.
• Experience using ticketing, monitoring or security systems.

Qualifications

No specific professional certification is essential. The following would be helpful but can also be developed in role:

• A degree, apprenticeship, college qualification or other learning in cyber security, computing, IT or a related subject.
• SC-900: Microsoft Security, Compliance and Identity Fundamentals.
• Other relevant entry-level cyber security or IT certification.

Working Arrangements

This role uses a hybrid working approach. Because it is a practical learning role, regular office presence is important, particularly at the start, so that the postholder can work alongside cyber and service desk colleagues, observe issues as they arise and build knowledge through day-to-day contact. The postholder will therefore be expected to work from the Caerphilly office for at least three days each week during the initial learning period. Future arrangements will be considered in line with service needs and the postholder's development. A driving licence is not required.